把 /uploads 网址路径落到 UPLOAD_DIR,避免误判文件不存在。 页面和接口不再回传路径或堆栈,只提示稍后重试。
Protect upload cleanup and atomic completion paths, add durable media worker leases and brand asset validation, and introduce verified migration/bootstrap/deployment gates.